Join the Hilltopper Family

Can you see yourself making a positive impact at WKU? We offer an inviting and challenging work environment, responsive to the needs of a diverse and ambitious learning community. See our open faculty and staff positions. Employment Website.

Phishing Information

On this page:

What is Phishing?

Phishing is a common scam that attempts to lure you into giving up your username,
password, or other sensitive information by masquerading as someone you know and trust.
This can be done by phone, but is typically done in email. The email may appear
to come from WKU or another company you do business with, and it often asks you to
click a link, open an attachment, or reply with your account or personal information.

Information for Victims

If you responded to a phishing message, take the following steps to protect yourself
and others:

If you are a WKU employee:

Contact IT SupportWKU employees are required to report their responses to phishing messages to IT Security. Contact IT here. It is essential that you tell us whether or not you released any WKU institutional
data or personal information about WKU faculty, staff, students, or alumni.

Report the phishing messagePlease see the information regarding reporting.

If you are a WKU student:

Change the appropriate passwordsIf you responded to a phish with your TopperMail username and password, please follow these steps. If you responded with your NetID username and password, please immediately change your NetID password. If you are unsure about any part of this process, please contact the IT Helpdesk.

Report the phishing messagePlease see the information regarding reporting.

Obtain your credit reports from Equifax, TransUnion, and Experian and place them on a "Fraud Alert." Consider a "Security Freeze" on your credit,
which is stronger than a fraud alert but prevents 3rd party access to your credit
report. Consult with one of the three credit agencies for more details.

Phishing Examples

NEW! The IT Phish Bowl now provides some of the latest phishing examples at http://www.wku.edu/it/phishbowl/. Also, follow @WKUIT on Twitter for real-time updates on system status and the latest
phishing alerts.